Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/18a2f7cf-2c91-44c2-a109-17138ef87fcc/f877bd71-35ee-39f7-89dd-9b00abaa8fab.roa
File:                     f877bd71-35ee-39f7-89dd-9b00abaa8fab.roa (raw, json)
Hash identifier:          KgcRSCHnLoRPyQJec9ouc8qvl6O03C1RGsKusxnIusw=
Subject key identifier:   7E:0C:E1:7E:CB:94:42:70:59:17:D3:BD:64:42:C3:AD:2E:4D:58:FC
Certificate issuer:       /CN=18a2f7cf-2c91-44c2-a109-17138ef87fcc
Certificate serial:       010D0C9F43285848F926AD59929A6D11D8A88A80
Authority key identifier: 66:06:53:1B:FE:2C:EE:A0:B5:C1:45:EB:7A:10:2B:28:AE:13:84:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/18a2f7cf-2c91-44c2-a109-17138ef87fcc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/18a2f7cf-2c91-44c2-a109-17138ef87fcc/f877bd71-35ee-39f7-89dd-9b00abaa8fab.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     13781
IP address blocks:        23.151.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/18a2f7cf-2c91-44c2-a109-17138ef87fcc/18a2f7cf-2c91-44c2-a109-17138ef87fcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/18a2f7cf-2c91-44c2-a109-17138ef87fcc/18a2f7cf-2c91-44c2-a109-17138ef87fcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/18a2f7cf-2c91-44c2-a109-17138ef87fcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:ad:59:92:9a:6d:11:d8:a8:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18a2f7cf-2c91-44c2-a109-17138ef87fcc
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=80c52c3f-a56b-4762-b251-7d552df244ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:75:66:d8:5b:2f:34:47:69:f2:f0:5d:6f:bd:
                    89:c3:a1:4a:53:ca:af:f7:73:bb:75:2c:0a:cc:41:
                    e0:15:cf:d8:48:67:ea:1d:db:5c:bc:35:b0:31:73:
                    49:21:a7:f3:ab:d6:3d:39:7a:f3:fb:18:8a:19:9d:
                    93:b9:e3:db:4d:52:b5:35:7b:24:56:d5:e4:a8:79:
                    9a:0e:aa:f9:ca:73:ba:34:c1:22:6d:89:3c:d7:1e:
                    8b:06:38:28:75:bc:18:c8:a2:90:ef:f4:c3:33:2b:
                    6d:c6:3d:e1:29:03:a1:fc:4b:11:7b:c0:2f:50:0d:
                    63:f3:27:29:98:db:74:52:42:54:1b:d3:41:44:42:
                    9a:9e:93:da:bf:37:b5:e9:82:39:b0:13:0a:72:30:
                    70:b1:27:d7:af:c7:9d:4d:22:b0:5f:c9:d9:e6:dc:
                    a3:6f:3f:95:83:77:c4:33:f3:bd:a3:2b:c7:5a:7e:
                    d5:d8:07:90:a2:fa:e6:81:6a:e6:88:c3:dd:cf:f3:
                    4f:67:3f:d9:aa:a1:e3:20:11:ce:db:06:55:fc:47:
                    ee:18:5c:25:8d:0c:35:bf:5c:e4:ef:d2:5a:48:3b:
                    68:48:51:af:05:09:1d:7f:96:7c:af:2c:c9:83:40:
                    c9:7b:8b:c1:18:46:f8:dd:64:03:4a:69:f1:17:1d:
                    90:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:0C:E1:7E:CB:94:42:70:59:17:D3:BD:64:42:C3:AD:2E:4D:58:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/18a2f7cf-2c91-44c2-a109-17138ef87fcc/f877bd71-35ee-39f7-89dd-9b00abaa8fab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/18a2f7cf-2c91-44c2-a109-17138ef87fcc/18a2f7cf-2c91-44c2-a109-17138ef87fcc.crl

            X509v3 Authority Key Identifier:
                keyid:66:06:53:1B:FE:2C:EE:A0:B5:C1:45:EB:7A:10:2B:28:AE:13:84:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/18a2f7cf-2c91-44c2-a109-17138ef87fcc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.151.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:70:aa:81:73:a8:ed:fe:90:8d:5d:b8:10:52:76:83:86:a2:
         66:59:32:16:be:ce:e7:2e:e2:b1:43:a1:ff:20:28:b1:8b:8d:
         3e:9a:c4:c9:a3:bf:bb:99:3c:2d:ae:75:94:92:a0:6e:82:82:
         d2:8d:3f:fa:78:8f:93:b8:05:25:c1:63:58:2f:bb:d5:83:79:
         e5:d3:04:cc:58:a7:74:26:99:69:c9:a6:72:56:71:17:bc:c0:
         e6:10:d3:91:4f:d3:1a:86:29:60:60:44:10:2d:22:43:b0:68:
         77:11:a6:7e:72:ad:47:c7:ba:f8:e8:ea:04:ce:b8:aa:dd:c6:
         3b:15:2c:0c:46:02:e3:00:61:ec:1a:f8:f2:7c:7e:b1:c6:eb:
         87:e0:bf:51:d6:7f:9b:59:6f:8c:66:50:de:3a:2d:55:e8:37:
         85:e5:9b:47:a2:96:0a:b3:39:cc:c1:62:cb:1a:c1:ce:d7:62:
         a9:57:a1:ae:0b:b7:19:09:3a:28:e6:af:8e:53:a3:1c:86:44:
         39:ee:2a:35:66:85:43:25:f8:03:db:39:b6:cf:3e:93:7d:18:
         17:78:26:d4:5a:aa:c0:ae:b2:c7:7f:fd:5a:ab:cb:79:73:73:
         b2:90:8c:23:d3:fe:4a:ab:34:92:bd:ad:a0:1f:ff:d1:36:a2:
         ad:3c:59:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:08:22 2025 by rpki-client